Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/945C6E08E0BED7C863E379F44A112D3468FFC78F.cer
File:                     945C6E08E0BED7C863E379F44A112D3468FFC78F.cer (raw, json)
Hash identifier:          Baz+IfOOKiXRmrN4PJMoG3eBvZnvT/lP9IQeuzkTt88=
Subject key identifier:   94:5C:6E:08:E0:BE:D7:C8:63:E3:79:F4:4A:11:2D:34:68:FF:C7:8F
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       70A70C3B0D7EA3A92AB17CA1C73773BB94825321
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rpki.kitten.network/repo/MythicalKitten/7/945C6E08E0BED7C863E379F44A112D3468FFC78F.mft
caRepository:             rsync://rpki.kitten.network/repo/MythicalKitten/7
Notify URL:               https://rpki.kitten.network/rrdp/notification.xml
Certificate not before:   Mon 17 Apr 2023 12:22:52 +0000
Certificate not after:    Mon 15 Apr 2024 12:27:52 +0000
Subordinate resources:    IP: 2a06:a005:b70:: -- 2a06:a005:b9f:ffff:ffff:ffff:ffff:ffff
                          IP: 2a06:a005:bd0:: -- 2a06:a005:bff:ffff:ffff:ffff:ffff:ffff
                          IP: 2a06:a005:d41::/48
                          IP: 2a06:a005:1040::/43
                          IP: 2a06:a005:1490:: -- 2a06:a005:14df:ffff:ffff:ffff:ffff:ffff
                          IP: 2a06:a005:1600::/44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a7:0c:3b:0d:7e:a3:a9:2a:b1:7c:a1:c7:37:73:bb:94:82:53:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Apr 17 12:22:52 2023 GMT
            Not After : Apr 15 12:27:52 2024 GMT
        Subject: CN=945C6E08E0BED7C863E379F44A112D3468FFC78F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:71:51:39:e1:ef:f5:52:48:9b:2c:ab:19:ee:
                    7e:65:ab:db:4d:cf:cf:fb:31:a2:9c:9e:05:e3:01:
                    b8:ce:93:24:38:4f:96:21:6c:2e:a3:4a:37:e0:02:
                    9d:e6:de:e4:39:25:cc:c2:f9:7e:22:71:3b:7e:53:
                    e9:19:df:85:a5:8e:d4:25:ab:e6:2d:21:85:f2:57:
                    fc:06:d8:e2:cd:bd:44:06:1d:48:be:9e:bf:ac:ac:
                    7f:51:8d:9e:4f:3b:7c:1a:7c:1e:f4:47:28:f1:94:
                    b4:5e:15:7a:65:93:eb:37:ef:bf:2c:d5:e8:75:66:
                    83:7d:09:78:14:1d:a5:93:8e:d2:52:b8:cd:cf:71:
                    cf:39:b9:38:e6:13:30:7e:76:e0:8d:d4:bf:85:a5:
                    77:28:2c:ce:31:21:c5:8c:5a:56:91:85:56:9a:e6:
                    70:36:10:32:d4:e9:77:d6:a1:3d:c1:d1:04:1e:cf:
                    70:c9:d1:df:81:cf:49:90:ee:0f:7a:9c:70:b2:30:
                    03:9f:1c:0e:a2:d1:7e:a7:45:50:53:60:27:58:41:
                    c2:57:da:79:d2:21:d6:8c:32:27:db:95:3a:de:e3:
                    63:f2:b3:e2:78:65:d6:5d:15:dd:a8:e6:53:b3:0e:
                    b2:93:1f:d1:c6:96:71:70:3a:3e:6e:73:41:ba:df:
                    38:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:5C:6E:08:E0:BE:D7:C8:63:E3:79:F4:4A:11:2D:34:68:FF:C7:8F
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.kitten.network/repo/MythicalKitten/7
                RPKI Manifest - URI:rsync://rpki.kitten.network/repo/MythicalKitten/7/945C6E08E0BED7C863E379F44A112D3468FFC78F.mft
                RPKI Notify - URI:https://rpki.kitten.network/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:b70::-2a06:a005:b9f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:bd0::-2a06:a005:bff:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:d41::/48
                  2a06:a005:1040::/43
                  2a06:a005:1490::-2a06:a005:14df:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:1600::/44

    Signature Algorithm: sha256WithRSAEncryption
         20:11:e2:00:2c:3b:f6:bf:8b:0c:07:86:de:05:31:f1:45:6a:
         fc:61:38:99:3f:78:b8:d2:e9:ef:28:3f:a8:f7:2d:fe:c2:e6:
         ce:1f:f0:8e:a0:69:01:ed:43:15:8c:4c:bb:b8:5e:f0:c1:90:
         71:32:a2:77:20:1c:54:56:74:7b:3c:50:8a:92:61:eb:9a:ab:
         a3:03:e8:87:da:d7:11:c1:41:21:df:44:d7:fb:92:76:68:ec:
         35:9e:6a:c5:9b:18:ac:fe:47:de:69:3f:64:bb:7a:f6:8b:5b:
         f7:72:93:69:5f:3a:07:f7:01:a7:cd:f3:a0:6c:f3:97:bc:cf:
         27:68:88:e8:4d:8f:9c:31:44:9d:4d:7a:46:94:73:df:c5:02:
         b5:88:8d:12:05:99:9c:3d:97:4a:56:1b:8f:29:15:f2:e3:80:
         8f:b5:55:1a:0f:98:87:15:5e:ca:d9:96:99:f7:08:c2:d3:7b:
         0b:f7:e9:4b:aa:47:43:a0:1c:6c:18:29:20:26:9f:c7:1d:c4:
         f2:57:32:34:76:40:76:f5:b7:3d:21:6a:8a:95:eb:c2:a1:e4:
         56:47:2f:5d:38:f9:f0:0e:02:08:9d:3f:8b:cd:0c:ea:71:f7:
         ed:4e:c6:c3:c2:03:15:52:c2:8e:99:f7:94:46:06:7b:83:33:
         06:08:8e:24
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgIUcKcMOw1+o6kqsXyhxzdzu5SCUyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzA0MTcxMjIyNTJaFw0yNDA0MTUxMjI3NTJaMDMxMTAvBgNV
BAMTKDk0NUM2RTA4RTBCRUQ3Qzg2M0UzNzlGNDRBMTEyRDM0NjhGRkM3OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZcVE54e/1UkibLKsZ7n5lq9tN
z8/7MaKcngXjAbjOkyQ4T5YhbC6jSjfgAp3m3uQ5JczC+X4icTt+U+kZ34WljtQl
q+YtIYXyV/wG2OLNvUQGHUi+nr+srH9RjZ5PO3wafB70RyjxlLReFXplk+s3778s
1eh1ZoN9CXgUHaWTjtJSuM3Pcc85uTjmEzB+duCN1L+FpXcoLM4xIcWMWlaRhVaa
5nA2EDLU6XfWoT3B0QQez3DJ0d+Bz0mQ7g96nHCyMAOfHA6i0X6nRVBTYCdYQcJX
2nnSIdaMMifblTre42Pys+J4ZdZdFd2o5lOzDrKTH9HGlnFwOj5uc0G63zjdAgMB
AAGjggLbMIIC1zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSUXG4I4L7XyGPj
efRKES00aP/HjzAfBgNVHSMEGDAWgBR5lDjxsXYq7vijXPTmy66XaZvQIDAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC8yLzc5OTQzOEYxQjE3NjJBRUVGOEEzNUNGNEU2Q0JBRTk3Njk5QkQwMjAu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lWlE0OGJGMkt1NzRvMXowNXN1dWwy
bWIwQ0EuY2VyMIH6BggrBgEFBQcBCwSB7TCB6jA9BggrBgEFBQcwBYYxcnN5bmM6
Ly9ycGtpLmtpdHRlbi5uZXR3b3JrL3JlcG8vTXl0aGljYWxLaXR0ZW4vNzBqBggr
BgEFBQcwCoZecnN5bmM6Ly9ycGtpLmtpdHRlbi5uZXR3b3JrL3JlcG8vTXl0aGlj
YWxLaXR0ZW4vNy85NDVDNkUwOEUwQkVEN0M4NjNFMzc5RjQ0QTExMkQzNDY4RkZD
NzhGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6Ly9ycGtpLmtpdHRlbi5uZXR3b3Jr
L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAAjBWMBIDBwQqBqAFC3ADBwUqBqAFC4Aw
EQMHBCoGoAUL0AMGAioGoAUIAwcAKgagBQ1BAwcFKgagBRBAMBIDBwQqBqAFFJAD
BwUqBqAFFMADBwQqBqAFFgAwDQYJKoZIhvcNAQELBQADggEBACAR4gAsO/a/iwwH
ht4FMfFFavxhOJk/eLjS6e8oP6j3Lf7C5s4f8I6gaQHtQxWMTLu4XvDBkHEyoncg
HFRWdHs8UIqSYeuaq6MD6Ifa1xHBQSHfRNf7knZo7DWeasWbGKz+R95pP2S7evaL
W/dyk2lfOgf3AafN86Bs85e8zydoiOhNj5wxRJ1NekaUc9/FArWIjRIFmZw9l0pW
G48pFfLjgI+1VRoPmIcVXsrZlpn3CMLTewv36UuqR0OgHGwYKSAmn8cdxPJXMjR2
QHb1tz0haoqV68Kh5FZHL104+fAOAgidP4vNDOpx9+1OxsPCAxVSwo6Z95RGBnuD
MwYIjiQ=
-----END CERTIFICATE-----